How the current checkout works

1. 1. Checkout creation

   A checkout session is created through the API in a single database transaction that also creates the invoice, the invoice's dedicated wallet, and a scoped read token for the payment page. The currency is fixed to USDT; the API rejects any other value.

2. 2. Dedicated invoice wallet

   Each invoice gets its own Solana wallet, generated server-side. The wallet's private key is encrypted at rest and is never returned in an API response or exposed to the browser.

3. 3. Customer payment

   The customer opens the hosted payment page and sends the exact USDT amount, on Solana, to the invoice wallet address shown on that page.

4. 4. Manual versus verifier-confirmed status

   A payment reaches paid status one of two ways: it passes the implemented verifier — correct mint, exact recipient, exact amount, minimum confirmation depth, and a unique transaction hash — or a founder manually confirms it from the dashboard. Manual confirmation is a founder-authorized action, not evidence that the verifier ran. See the transaction record page for the exact state definitions.

5. 5. Current production limitations

   The automated blockchain observer that would watch for payments without a founder checking manually is disabled by default in production today. Founders should expect to confirm payments manually until unattended monitoring is enabled and validated.

USDC is not an active checkout currency. It is captured on the early-access application only as a preferred-asset research signal for future product decisions.